Quick answers
- Is CVE-2026-9225 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-2026-9225 being exploited in the wild.
- How severe is CVE-2026-9225?
- Medium severity, with a CVSS score of 6.5, published 10 September 2026.
- Which products and versions are affected?
- IBM Langflow 1.0.0 through 1.11.5.
- Is there a fix for CVE-2026-9225?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-2026-9225 attacked?
- It is attacked over the network, in a software library.
- Am I affected by CVE-2026-9225?
- Check whether you run Langflow. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability is an improper access control issue in the File/Read File component used within Langflow flows. When flows are executed via the /api/v1/run/advanced/{flow_id} endpoint, component inputs can reference storage paths with arbitrary user or flow identifiers without ownership verification. An authenticated attacker can craft file paths pointing to another user's storage namespace to read and return file contents uploaded by other users, bypassing authorization checks in the file management API. Exploitation requires valid authentication credentials but no special privileges.
Affected products
- IBM Langflow 1.0.0 through 1.11.5
Timeline
- 2026-09-10: disclosed